add simple auth controller